CVE Database›Document archive›CVE-2025-71203

CVE-2025-71203

kernel: riscv: Sanitize syscall table indexing under speculation

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · February 14, 2026

Updated · June 28, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

riscv: Sanitize syscall table indexing under speculation

The syscall number is a user-controlled value used to index into the syscall table. Use array_index_nospec() to clamp this value after the bounds check to prevent speculative out-of-bounds access and subsequent data leakage via cache side channels.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE not specified